Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: hRUgiNeJY6gByVaikBGcf1nJtMm6pmIKF4btwYH8Nq4=
Subject key identifier: DF:E2:DD:A4:79:E1:8A:B5:A1:9C:C7:20:D3:FD:41:58:B5:83:08:A3
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4423D7A0AC25F0C0BE03E195B668DE9085C27AA6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa
Signing time: Thu 12 Dec 2024 15:28:23 +0000
ROA not before: Thu 12 Dec 2024 15:23:23 +0000
ROA not after: Thu 11 Dec 2025 15:28:23 +0000
asID: 54252
IP address blocks: 104.234.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:23:d7:a0:ac:25:f0:c0:be:03:e1:95:b6:68:de:90:85:c2:7a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 12 15:23:23 2024 GMT
Not After : Dec 11 15:28:23 2025 GMT
Subject: CN=DFE2DDA479E18AB5A19CC720D3FD4158B58308A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e0:e5:15:b9:6e:dd:d8:22:b2:6e:98:f5:58:
39:1a:5c:48:71:33:bf:31:0b:16:3e:d7:47:2f:be:
b4:0e:4e:ac:32:c4:4b:c6:01:a7:ed:27:e5:ad:22:
84:df:5a:4c:6d:66:b0:ed:e7:51:55:7b:58:bb:4b:
66:cd:be:72:e0:7f:c0:3c:ea:1f:0a:4a:64:a5:a9:
b1:ac:32:4e:20:af:59:f2:8f:fe:98:1f:fc:a8:94:
93:69:38:e2:57:12:c7:2a:51:a9:ec:0a:a6:f5:5c:
c5:23:2d:ab:9b:44:72:c8:9d:3b:f0:32:d2:83:42:
6b:4c:a3:7a:a1:9a:77:0d:81:8d:fd:30:44:6a:17:
b8:f8:20:63:c8:03:0b:f9:fc:e0:b7:c4:f8:f6:d1:
c9:00:27:87:00:02:62:e6:66:5a:1a:0c:1c:cd:b3:
8a:1b:69:9d:16:02:dc:5c:53:48:b8:d8:a5:d5:8b:
f6:22:66:0e:8f:7e:49:8e:2f:20:30:31:f4:00:fc:
91:54:29:49:08:6e:d1:55:d3:d9:34:ee:4f:de:bc:
b8:ff:6a:69:34:c4:96:c1:2c:99:06:2c:46:5f:26:
c8:67:ae:bf:0d:95:2a:08:25:f5:41:1f:19:88:47:
79:e4:96:b2:20:69:63:9a:ce:53:dc:32:38:55:9e:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:DD:A4:79:E1:8A:B5:A1:9C:C7:20:D3:FD:41:58:B5:83:08:A3
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.29.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d8:a0:e0:b2:cb:cf:dc:22:1d:99:be:12:a9:00:de:7d:0a:
97:08:7c:80:a2:9e:04:ac:09:b2:55:92:0c:44:c5:94:fd:57:
6f:55:3b:05:c4:c4:81:a8:03:72:2e:88:7a:5d:b9:7e:70:79:
fd:a9:e8:6c:8c:ed:d4:9a:3a:c8:42:73:34:98:13:af:16:a7:
e8:88:87:48:07:2d:e6:2d:a0:7c:51:c5:3d:8e:a5:98:6f:35:
29:7b:9d:e9:7d:e5:a1:4f:f4:74:2a:ac:43:47:d0:cb:ca:d1:
6a:a3:ed:07:04:51:5a:54:28:18:2f:0b:21:a4:81:33:74:e8:
ef:3e:85:0d:93:2e:48:13:79:85:f9:9b:88:cf:c1:a9:c3:85:
c1:26:09:f3:1f:a4:2b:b3:01:54:a0:d2:ac:1c:79:d8:7d:fa:
12:19:5c:e8:98:f4:a8:90:00:df:4b:2e:80:97:e7:89:b3:99:
7d:40:69:33:99:7d:33:f6:e1:52:53:7c:b1:73:16:42:8b:1a:
d0:d0:51:bd:6c:07:b5:bc:96:df:22:f8:a3:3b:de:1b:a8:f7:
23:d7:7c:cf:d8:ea:92:7f:32:d0:b8:fc:07:73:c9:d2:6b:9b:
34:07:45:8f:bb:b7:4b:e2:fb:c9:80:de:6c:ef:88:5e:5c:3c:
4d:56:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:33:16 2025 by rpki-client